Câu 83: SSCP: System Security Certified Practitioner (SSCP)

Which of the following statements pertaining to access control is false?

1. A. Users should only access data on a need-to-know basis.
2. B. If access is not explicitly denied, it should be implicitly allowed. — đáp án hiện tại
3. C. Access rights should be granted based on the level of trust a company has on a subject.
4. D. Roles can be an efficient way to assign rights to a type of user who performs certain tasks.